High severity · published May 9, 2025
CVE-2024-13944
Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp)
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 6% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
CleanUp · Avast
through 24.3.17165.19178 · source: vendor
NU
Norton Utilities Ultimate · Norton
through 24.3.17165.6812 · source: vendor
TU
TuneUp · AVG
through 24.3.17165.10564 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-13944
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-13944
www.gendigital.com
https://www.gendigital.com/us/en/contact-us/security-advisories/
More from CleanUp
7.8
CVE-2024-7229
Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability
7.8
CVE-2024-7231
Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability
7.8
CVE-2024-7230
Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability